{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:33.699Z","products":["acronis"],"actNowTotal":1,"results":[{"query":"acronis","matched":1,"actNow":1,"events":[{"id":"kev-2026-09-16-acronis-backup","url":"https://securitythreatpulse.com/events/kev-2026-09-16-acronis-backup","title":"Acronis Backup: attackers can gain admin rights","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 54 days old, so many systems are likely still unpatched.","tier":"now","rankScore":4,"rankWhy":["Exploitation is confirmed by an authoritative source.","4 products are affected."],"rulesVersion":"v3","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-87886"],"vendor":"Acronis","product":"Backup","affectedProducts":[{"kind":"direct","slug":"acronis/backup","vendor":"Acronis","product":"Backup","evidence":["kev"],"vendorKey":"acronis","productKey":"backup"},{"kind":"direct","slug":"acronis/acronisbackuppluginforcpanelwhm","vendor":"Acronis","product":"Acronis Backup Plugin For Cpanel & Whm","evidence":["cpe"],"vendorKey":"acronis","productKey":"acronisbackuppluginforcpanelwhm"},{"kind":"direct","slug":"acronis/acronisbackupextensionforplesk","vendor":"Acronis","product":"Acronis Backup Extension For Plesk","evidence":["cpe"],"vendorKey":"acronis","productKey":"acronisbackupextensionforplesk"},{"kind":"direct","slug":"acronis/acronisbackuppluginfordirectadmin","vendor":"Acronis","product":"Acronis Backup Plugin For Directadmin","evidence":["cpe"],"vendorKey":"acronis","productKey":"acronisbackuppluginfordirectadmin"}],"category":{"id":"server-backup","label":"Servers and backups","why":"It runs or protects many systems at once, including your backups.","doThis":"Patch it and keep its admin access off the internet."},"summary":"Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.","cvss":7.8,"epss":0.00233,"exploitMaturity":"none","kevListed":true,"kevDateAdded":"2026-09-16","kevDueDate":"2026-09-19","firstSeenAt":"2026-09-16T00:00:00.000Z","updatedAt":"2026-11-10T23:00:07.279Z","newestEvidenceAt":"2026-09-17T22:57:18.089Z"}]}]}